A structural map of Cloudflare's revenue mix heading into FY26, product by product.
| Product | Pillar | What it does | Pricing | Est. FY26 Rev |
|---|---|---|---|---|
| CDN + Bandwidth | App Svcs | Caching, edge delivery, traffic acceleration across 330+ PoPs | Pro/Business subs per domain; Enterprise contracted | ~$620M |
| WAAP | App Svcs | Web App firewall, API security, OWASP Top 10 protection | Tier-based; usage add-ons | ~$420M |
| DDoS Protection | App Svcs | L3/L4/L7 always-on attack mitigation | Bundled with WAAP/CDN; standalone Magic Transit | ~$310M |
| Magic Transit + Spectrum | App Svcs | Network-layer protection for IP ranges; TCP/UDP proxying | Enterprise contracted | ~$170M |
| Bot Management | App Svcs | ML-based bad-bot detection; AI crawler controls; pay-per-crawl | Enterprise add-on; per-request | ~$110M |
| Cloudflare One (SASE) | Zero Trust | Unified SASE umbrella: ZTNA + SWG + CASB + DLP | Per-seat; multi-year | ~$340M |
| Magic WAN | Zero Trust | SD-WAN replacement; site-to-site connectivity on Cloudflare's backbone | Per-site + bandwidth tiers | ~$170M |
| Email Security (Area 1) | Zero Trust | Inbound/outbound email threat protection | Per-mailbox | ~$110M |
| Other Zero Trust | Zero Trust | Browser Isolation, 1.1.1.1 for Families, Tunnel, Warp+ | Mixed per-seat/usage | ~$80M |
| Workers (Serverless Compute) | Dev Svcs | Edge JavaScript/WASM compute; ~330 PoPs globally; cold-start <5ms | Per-request + CPU-ms | ~$220M |
| Workers AI | Dev Svcs | GPU-backed inference at the edge; ~50 open models pre-loaded | Per-neuron / per-token | ~$80M |
| R2 + D1 + KV + Durable Objects | Dev Svcs | Object storage (zero egress), SQLite, key-value, stateful workers | Storage + ops billed | ~$130M |
| AI Gateway, Vectorize, Hyperdrive | Dev Svcs | Model routing, vector DB, DB acceleration for AI apps | Usage-based | ~$50M |